circlecloud/tmux
1
0
Fork 0
mirror of https://github.com/tmux/tmux.git synced 2026-04-16 03:56:28 +00:00
Code Issues Projects Releases Wiki Activity

Do not read off end of buffer if it ends in \ when expanding \c, found

Browse Source 
by ossfuzz.
This commit is contained in:
nicm
2026-04-04 11:32:05 +00:00
parent cd60de443e
commit 3badbc50e0
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
regsub.c
View File

@@ -41,7 +41,7 @@ regsub_expand(char **buf, ssize_t *len, const char *with, const char *text,
u_int i; u_int i;
for (cp = with; *cp != '\0'; cp++) { for (cp = with; *cp != '\0'; cp++) {
if (*cp == '\\') { if (cp[0] == '\\' && cp[1] != '\0') {
cp++; cp++;
if (*cp >= '0' && *cp <= '9') { if (*cp >= '0' && *cp <= '9') {
i = *cp - '0'; i = *cp - '0';